Large VPN services in Service Health

When building out your network at scale, it is important to know the best time to enable large VPN services for optimal health monitoring.

If large VPNs are enabled during ongoing Layer 2 (L2) and Layer 3 (L3) service discovery, health checks for these VPNs might be delayed. The process could take up to nine hours to complete. This article presents best practices and workflow steps to help you report large VPN health quickly and reliably.

Key details when enabling large VPN services

During scale build-up, customers often enable services such as L2, L3, and large VPNs at different times. If large VPNs are brought online while L2 and L3 services are still being discovered or stabilized, VPN health reporting can take much longer. Concurrent processing and the heavy load of onboarding services cause these delays.

Consider these best practices:

  • Plan your onboarding sequence by enabling and stabilizing L2 and L3 services before starting large VPN monitoring.
  • Sequencing onboarding optimizes health reporting and can reduce VPN health check times from nine hours to about one hour, even in large environments.
  • Coordinate for existing deployments if you are updating an active network and work with support to schedule monitoring steps to avoid delays.
  • Understand potential delays if you must enable large VPN monitoring early since health checks may take much longer to complete.

Enable the large VPN services workflow

You can use the workflow example steps to plan enabling large VPN services and monitor health checks.

  • Enable and monitor L2 and L3 services, where standard health check times apply.
  • Confirm that the service's health checks are complete.
  • Enable and monitor large VPN services (health checks take approximately 1 hour).

Step 1

Start scale build-up:

  • Onboard your required L2 and L3 services.
  • Enable monitoring for these services.

Step 2

Monitor L2 and L3 Service Health:

  • Wait for the system to fully discover your L2 and L3 services.
  • Allow time for health checks on these services to complete.
  • Here, standard health check times apply.

Step 3

Enable and monitor large VPN Services:

  • Once your L2 and L3 services are stable and health checks are complete, move on to large VPNs.
  • Enable monitoring for the large VPN services.
 Note
Enabling large VPN monitoring before L2 and L3 services are fully discovered may result in health check times of up to 9 hours.

Expect health checks for large VPNs to finish in about 1 hour .

To avoid unnecessary delays, always enable monitoring for large VPN services as the final step after L2 and L3 services are up and stable. This ensures large VPN health status is reported quickly, helping you keep your network reliable and efficient.

For existing networks or special cases, coordinate with support and plan your onboarding sequence carefully to minimize any disruptions.